ATTORNEY DOCKET NO.: 1 1 1325-007 (050100) 

Application No.: 09/469,726 

Page 2 

Amendments to the Claims: 

1. (Currently Amended) A method for encrypting an original document for 
distribution to a selected recipient chosen from a plurality of possible recipients, 
comprising the steps of: 

generating a session key based on a random number privately maintained by the 
owner of the original document; 

encrypting the original document with a uniqu e the session key to create an 
encrypted document; 

generating a proxy key based on a public key corresponding to the selected 
recipient; and 

transforming the encrypted document with the proxy key to create a 
transformed document 

2. (Original) The method of claim 1 , further comprising the step of transmitting 
the transformed document to the selected recipient. 

3. (Currently Amended) The method of claim 1, further comprising the steps of: 
recovering the uniqu e session key from the transformed document; and 
decrypting the transformed document with the session key to recover the 

original document. 

4. (Original) The method of claim 3, wherein the recovering step is performed 
by applying a private key corresponding to the selected recipient. 

5. (Currently Amended) The method of claim 1, wherein the encrypting step is 
performed with a combination of a symmetric private-key encryption scheme and an 
asymmetric public-key encryption scheme . 
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6. (Currently Amended) The method of claim 5, wherein the asymmetric public- 
key encryption scheme is based on the ElGamal cryptosystem. 

7. (Currently Amended) The method of claim 5, wherein the encrypted 
document comprises a first portion representative of the original document encrypted 
via the symmetric private-key encryption scheme using the session key, and a second 
portion representative of the session key encrypted using an owner's private key 
according to the asymmetric public-key encryption scheme . 

8. (Currently Amended) The method of claim 1, wherein the original document 
is distributed to the selected recipient through at least one additional intermediate 
grantor by repeating the gen e rating and transforming st e ps for each additional 
intermediate grantor the following steps for each additional intermediate grantor: 

generating a new proxy key based on the intermediate grantor's public kev: and 
transformin g the encrypted document with the new proxy key to create a 
transformed document customized for the intermediate grantor . 
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